Re: Strange WLAN issue with ral(4) in hostap mode

[Raymond Lillard]

Todd T. Fries wrote:
> There are power savings for 802.11 that OpenBSD does not support; this is
> entirely independent from saving battery via cpu clocking and it is also
> entirely independent from saving battery via adjusting the transmit power
> of the radio.  The power savings for 802.11 actually put the radio to sleep
> for a given interval and wake it up sending a message to the AP which is
> supposed to hold packets for a given client until the client responds,
> which OpenBSD does not do, therefore packetloss ensues.
> 
> I know this very well, my BlackBerry Pearl 8120 gets 90-95% packet loss
> with an OpenBSD based AP.
> 
> Damien is aware of what needs doing, but I am to understand it is not a
> short or easy road to get there.

I believe I am seeing this problem with a new ral
in a Soekris 4801.  Over the holidays, I added:

GigaByte GN-WI01GS:

ral0 at pci0 dev 14 function 0 "Ralink RT2561S" rev 0x00: irq 11, address 
00:1f:d0:09:aa:06
ral0: MAC/BBP RT2561C, RF RT2527

Wanting to show off to some friends, I tried connecting
with a Linux laptop via WAP2.

When connection is made, it works well for a few minutes,
at which time it exhibits the above described behavior.
At first I thought it was me.  Now I wish it were.

I'm confused on one point though, is this issue specific
to ral or 802.11 in general?  My knowledge of things 802.11
is spotty at best.  In other words, can I work around this
by using a different MiniPCI card?

I'll happily donate the card to someone who volunteers to
work on this.

Regards all,
Ray

Re: use 3 nics as hub / switch

[Nick Templeton]

I'm doing what you're describing with a couple 4-port NICs.  I assign an 
IP to one of the interfaces so dhcpd can run on that, then bridge all 
the interfaces together.  Works like a charm.


Your config files would look something like -

hostname.rl1:
inet 192.168.1.1 255.255.255.0 192.168.1.255

hostname.rl2
up

bridgename.bridge0:
add rl1
add rl2
up

Then add dhcpd_flags="rl1" to rc.conf.local, dhcpd will respond to 
requests on either interface since it's a bridge.


-Nick

Marian Hettwer wrote:

Hi All and a happy new year,

got a short question here.
I'm building a home router from a blue box (embedded pc), which has 3 nics
(rl0, 1, 2).
Internet drops in via dhcp client on rl0. Now I got 2 NICs left and I'd
like to use them similar like a hub. Just use a cross over cable and plug
in 2 more devices which can then talk through that router.

My first try was to bridge rl1 and rl2, but then again, I want to use a
dhcp server on both interfaces and it seems like I can't do that, since I
can't give an ip on bridge0 and I wouldn't want to give an IP to rl1 and
rl2.

Any ideas to that setup?
I thought about giving rl1 an IP adress and rl2 one from another network.
Like rl1 with 192.168.1 and rl2 with 192.168.2 and then run dhcpd on rl1
and rl2 serving both subnets.
However, that doesn't look like a good approach to me.

Any other thoughts on that issue?

Ah yes, it's OpenBSD 4.4 release :)

best regards,
Marian

PS.: please CC me, I'm not subscribed to the list.

Re: Intel D945GCLF2

[Nenhum_de_Nos]

On Fri, January 2, 2009 17:40, Chris Cohen wrote:
> Has anyone installed openbsd on the Atom board "D945GCLF2"? If so could
> you post a dmesg and does it run stable?
>
> --
> Thanks
> Chris

has anyone seen any atom dual core with two lan ?

I'd like a pf router that would be low energy :)

Alix is openbsd friend right ? ( 2d3 in this case )
I did like alix but a mini itx with regular vga is better for me :)

thanks,

matheus


-- 
We will call you cygnus,
The God of balance you shall be

Re: OpenBSD, GCC 4 and Objective C

[Jonathan Schleifer]

"Ted Unangst"  wrote:

> Well, libc doesn't have any support for exceptions, but that's because
> c doesn't have exceptions.  (not the problem).

Well, actually libc was the wrong term. I more meant all the
libraries OpenBSD provides that are used by the GNU stuff like GCC ;).
Don't know any better term for that.

> It's possible that the libstdc++ built with gcc 4 doesn't have
> exception support

It shouldn't use the libstdc++ for ObjC at all. And it doesn't do
according to ldd. Only libobjc, and the correct one, the one provided
by gcc 4, and libc.

> or maybe the objective c compiler doesn't

GCC 4 should support exceptions for ObjC when specifying -fexceptions.

> or it links with the wrong library

Nope, it doesn't. See above.

> or one of a million things that arent turned on because some esoteric
> autoconf check failed.

That'd be a bug in the GCC 4 port then, I guess.

> Did you check if a c++ program exhibits the same problem?

Not with gcc 4, as I built that without C++ support and I don't want to
rebuild gcc 4 just for that test, if possible, as that took quite a
while on that 440 MHz machine. But with the gcc that comes with
OpenBSD, it works.

--
Jonathan

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: OpenBSD, GCC 4 and Objective C

[Ted Unangst]

On Fri, Jan 2, 2009 at 4:03 PM, Jonathan Schleifer
 wrote:
> Now if you compile it with egcc -fexceptions test.m -lobjc (you need
> GCC 4.x), it will just abort. It will do the same on any other OS if you
> don't specify -fexception or didn't catch the exception anywhere.
> However, it doesn't make any difference on OpenBSD whether you specify
> -fexceptions or not. Which is why I'm wondering: What's wrong here? Are
> we missing exception support in the OpenBSD libc? If so, wouldn't that
> give trouble with C++ as well? Or do I just need to specify some extra
> flags on OpenBSD?

Well, libc doesn't have any support for exceptions, but that's because
c doesn't have exceptions.  (not the problem).  It's possible that the
libstdc++ built with gcc 4 doesn't have exception support, or maybe
the objective c compiler doesn't, or it links with the wrong library,
or one of a million things that arent turned on because some esoteric
autoconf check failed.  Did you check if a c++ program exhibits the
same problem?

Re: Intel D945GCLF2

[Anathae Townsend]

checkout http://kerneltrap.org/mailarchive/openbsd-misc/2008/9/30/3457064

> -Original Message-
> From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf
> Of Chris Cohen
> Sent: Friday, January 02, 2009 12:41 PM
> To: misc@openbsd.org
> Subject: Intel D945GCLF2
> 
> Has anyone installed openbsd on the Atom board "D945GCLF2"? If so could
> you post a dmesg and does it run stable?
> 
> --
> Thanks
> Chris

Re: laptop choice

[shr @dslextreme.com]

On Fri, Jan 2, 2009 at 1:30 PM, Lars Noodin wrote:

> shr @dslextreme.com wrote:
> > ... The only drawback is that it doesn't have a built-in serial port. ...
>
> What is a reasonable work-around or solution for capturing the debugging
> data that would otherwise be only available via serial console?
>
> Regards,
> -Lars
>

Looks like you can write the dmesg to a floppy:

http://openbsd.org/faq/faq4.html#getdmesg

Re: AH+ESP and IPv6

[Felipe Alfaro Solana]

On Fri, Jan 2, 2009 at 8:36 PM,  wrote:

> If ESP does not decrypt, the payload is invalid. Adding AH adds no further
> functionality other than to thwart any attempts at NAT.


AH is not meant to thwart any attempts at NAT. For that, you have IPSec over
UDP. AH prevents any tampering with the IP header, which can be very useful.


>
> --
> Todd Fries .. t...@fries.net
>
>  _
> | \  1.636.410.0632 (voice)
> | Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
> | http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
> | "..in support of free software solutions."  \  250797 (FWD)
> | \
>  \\
>
>  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
>http://todd.fries.net/pgp.txt
>
> Penned by Felipe Alfaro Solana on 20090102 20:29.56, we have:
> | On Fri, Jan 2, 2009 at 7:52 PM, Todd T. Fries  wrote:
> |
> | > The other answer is, ESP provides AH, therefore AH is deprecated.
> |
> |
> | What do you mean? That OpenBSD's implementation of ESP automatically uses
> AH
> | too? (payload inside AH inside ESP?) Because ESP only provides
> | authentication for the payload only but not for the IP header. That's why
> AH
> | is useful.
> |
> | Unless you really really want to play with AH to verify it works and such
> | > (which the below suggests it does not) ...
> | > --
> | > Todd Fries .. t...@fries.net
> | >
> | >  _
> | > | \  1.636.410.0632 (voice)
> | > | Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
> | > | http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
> | > | "..in support of free software solutions."  \  250797 (FWD)
> | > | \
> | >  \\
> | >
> | >  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
> | >http://todd.fries.net/pgp.txt
> | >
> | > Penned by Felipe Alfaro Solana on 20090102 17:38.51, we have:
> | > | On Tue, Dec 30, 2008 at 9:29 PM, 
> | > wrote:
> | > |
> | > | > I'm trying to use both AH and ESP to setup IPsec using Transport
> mode
> | > | > between two IPv6 OpenBSD 4.4 hosts.
> | > | >
> | > | > So far it worked for AH Transport mode or ESP Transport mode but I
> | > don't
> | > | > quite know how to do both AH and ESP. Any ideas?
> | > | >
> | > | > Here's a snippet from /etc/ipsec.conf :
> | > | >
> | > | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
> | > | >
> | > | > The tried the following (and vice versa - ah vice esp).
> | > | >
> | > | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
> | > | >  flow ah from 2001::10 to 2001::5
> | > | >
> | > | > I'm not sure either.
> | > |
> | > | Since you can apply ESP then AH, or apply AH and then ESP (depending
> on
> | > | what's more important for you, the digital signature or the
> encryption)
> | > it's
> | > | not obvious to me how to do it.
> | > |
> | > | --
> | > | http://www.felipe-alfaro.org/blog/disclaimer/
> | >
> |
> |
> |
> | --
> | http://www.felipe-alfaro.org/blog/disclaimer/
>



-- 
http://www.felipe-alfaro.org/blog/disclaimer/

Re: Strange WLAN issue with ral(4) in hostap mode

[Todd T. Fries]

There are power savings for 802.11 that OpenBSD does not support; this is
entirely independent from saving battery via cpu clocking and it is also
entirely independent from saving battery via adjusting the transmit power
of the radio.  The power savings for 802.11 actually put the radio to sleep
for a given interval and wake it up sending a message to the AP which is
supposed to hold packets for a given client until the client responds,
which OpenBSD does not do, therefore packetloss ensues.

I know this very well, my BlackBerry Pearl 8120 gets 90-95% packet loss
with an OpenBSD based AP.

Damien is aware of what needs doing, but I am to understand it is not a
short or easy road to get there.

Thanks,
-- 
Todd Fries .. t...@fries.net

 _
| \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| "..in support of free software solutions."  \  250797 (FWD)
| \
 \\
 
  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
http://todd.fries.net/pgp.txt

Penned by Damon McMahon on 20090103  8:09.21, we have:
| Jussi - thanks for the response, but I've tried that to no effect,
| e.g. on the Macbook Pro the Energy Saver settings for Mains and
| Battery modes are identical.
| 
| On Fri, 2 Jan 2009 05:45:45 +0200, Jussi Peltola  wrote:
| > Disable power saving on the clients.

Re: Strange WLAN issue with ral(4) in hostap mode

[Damon McMahon]

Jussi - thanks for the response, but I've tried that to no effect,
e.g. on the Macbook Pro the Energy Saver settings for Mains and
Battery modes are identical.

On Fri, 2 Jan 2009 05:45:45 +0200, Jussi Peltola  wrote:
> Disable power saving on the clients.

Re: laptop choice

[Lars Noodén]

shr @dslextreme.com wrote:
> ... The only drawback is that it doesn't have a built-in serial port. ...

What is a reasonable work-around or solution for capturing the debugging
data that would otherwise be only available via serial console?

Regards,
-Lars

Re: OpenBSD, GCC 4 and Objective C

[Jonathan Schleifer]

Forgot to mention that this is on OpenBSD 4.4 on SPARC64. But I guess
this isn't so important, as letting someone else test it on x86 had
the same result.

--
Jonathan

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

OpenBSD, GCC 4 and Objective C

[Jonathan Schleifer]

Hello!

I'm currently writing on an Objective C framework and trying to port it
to OpenBSD. However, whenever I throw an exception using @throw,
abort() gets called. This is the usual behaviour if an exception isn't
cought. However, when I put it into a @try {} @catch {} block, that
doesn't change anything. For example, try this code:

#import 

int
main()
{
@try {
@throw [Object new];
} @catch (id e) {
[e free];
}

return 0;
}

Now if you compile it with egcc -fexceptions test.m -lobjc (you need
GCC 4.x), it will just abort. It will do the same on any other OS if you
don't specify -fexception or didn't catch the exception anywhere.
However, it doesn't make any difference on OpenBSD whether you specify
-fexceptions or not. Which is why I'm wondering: What's wrong here? Are
we missing exception support in the OpenBSD libc? If so, wouldn't that
give trouble with C++ as well? Or do I just need to specify some extra
flags on OpenBSD?

Thanks, help would be appreciated.

--
Jonathan

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: laptop choice

[shr @dslextreme.com]

> I want to buy a laptop (second hand is my first choice). I want some
> strong point on it, reliability - I want to use it for a long time
> (excluding battery) so I don't need broken hdd, excessive heat, noise,
> etc.
> I don't need performance, I will use it only for some pdf read and
> browsing. Maybe some programming, but not much and not heavy compile
> actions for sure. So a P4 1.6 - 2GHz cpu is fine, 512MB of ram and
> maybe 40GB hdd. No fancy video card is necessary. Ethernet cooper
> interface is mandatory. Good OpenBSD compatibility will be nice. The
> screen should be around 15", 17" as a suggestion only.
> From what I saw, Lenovo/IBM X and T models are the first choice. I am
> also moved to DELL suite, but I don't have some experience with them.
>

Right now I'm using a Toshiba Satellite 1100-S101. The DVD/CD drive is
rather touchy, so I installed OpenBSD 4.4 over the network with a boot
floppy and had no issues. All hardware -- sound, video, floppy drive,
Ethernet -- works perfectly. It ran fine with 256 MB, but I just added an
additional 512 MB.

The processor is a Celeron 1.3 GHz. screen is 14.1 inches.

It doesn't get all that hot when compared to other laptops I have. The only
drawback is that it doesn't have a built-in serial port. As a platform for
OpenBSD, so far this is the best machine in my herd.

Intel D945GCLF2

[Chris Cohen]

Has anyone installed openbsd on the Atom board "D945GCLF2"? If so could 
you post a dmesg and does it run stable?


--
Thanks
Chris

Re: AH+ESP and IPv6

[todd]

If ESP does not decrypt, the payload is invalid. Adding AH adds no further
functionality other than to thwart any attempts at NAT.
-- 
Todd Fries .. t...@fries.net

 _
| \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| "..in support of free software solutions."  \  250797 (FWD)
| \
 \\
 
  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
http://todd.fries.net/pgp.txt

Penned by Felipe Alfaro Solana on 20090102 20:29.56, we have:
| On Fri, Jan 2, 2009 at 7:52 PM, Todd T. Fries  wrote:
| 
| > The other answer is, ESP provides AH, therefore AH is deprecated.
| 
| 
| What do you mean? That OpenBSD's implementation of ESP automatically uses AH
| too? (payload inside AH inside ESP?) Because ESP only provides
| authentication for the payload only but not for the IP header. That's why AH
| is useful.
| 
| Unless you really really want to play with AH to verify it works and such
| > (which the below suggests it does not) ...
| > --
| > Todd Fries .. t...@fries.net
| >
| >  _
| > | \  1.636.410.0632 (voice)
| > | Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| > | http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| > | "..in support of free software solutions."  \  250797 (FWD)
| > | \
| >  \\
| >
| >  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
| >    http://todd.fries.net/pgp.txt
| >
| > Penned by Felipe Alfaro Solana on 20090102 17:38.51, we have:
| > | On Tue, Dec 30, 2008 at 9:29 PM, 
| > wrote:
| > |
| > | > I'm trying to use both AH and ESP to setup IPsec using Transport mode
| > | > between two IPv6 OpenBSD 4.4 hosts.
| > | >
| > | > So far it worked for AH Transport mode or ESP Transport mode but I
| > don't
| > | > quite know how to do both AH and ESP. Any ideas?
| > | >
| > | > Here's a snippet from /etc/ipsec.conf :
| > | >
| > | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
| > | >
| > | > The tried the following (and vice versa - ah vice esp).
| > | >
| > | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
| > | >  flow ah from 2001::10 to 2001::5
| > | >
| > | > I'm not sure either.
| > |
| > | Since you can apply ESP then AH, or apply AH and then ESP (depending on
| > | what's more important for you, the digital signature or the encryption)
| > it's
| > | not obvious to me how to do it.
| > |
| > | --
| > | http://www.felipe-alfaro.org/blog/disclaimer/
| >
| 
| 
| 
| -- 
| http://www.felipe-alfaro.org/blog/disclaimer/

Re: AH+ESP and IPv6

[Felipe Alfaro Solana]

On Fri, Jan 2, 2009 at 7:52 PM, Todd T. Fries  wrote:

> The other answer is, ESP provides AH, therefore AH is deprecated.


What do you mean? That OpenBSD's implementation of ESP automatically uses AH
too? (payload inside AH inside ESP?) Because ESP only provides
authentication for the payload only but not for the IP header. That's why AH
is useful.

Unless you really really want to play with AH to verify it works and such
> (which the below suggests it does not) ...
> --
> Todd Fries .. t...@fries.net
>
>  _
> | \  1.636.410.0632 (voice)
> | Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
> | http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
> | "..in support of free software solutions."  \  250797 (FWD)
> | \
>  \\
>
>  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
>http://todd.fries.net/pgp.txt
>
> Penned by Felipe Alfaro Solana on 20090102 17:38.51, we have:
> | On Tue, Dec 30, 2008 at 9:29 PM, 
> wrote:
> |
> | > I'm trying to use both AH and ESP to setup IPsec using Transport mode
> | > between two IPv6 OpenBSD 4.4 hosts.
> | >
> | > So far it worked for AH Transport mode or ESP Transport mode but I
> don't
> | > quite know how to do both AH and ESP. Any ideas?
> | >
> | > Here's a snippet from /etc/ipsec.conf :
> | >
> | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
> | >
> | > The tried the following (and vice versa - ah vice esp).
> | >
> | >  ike esp transport from 2001::10 to 2001::5 psk "secret"
> | >  flow ah from 2001::10 to 2001::5
> | >
> | > I'm not sure either.
> |
> | Since you can apply ESP then AH, or apply AH and then ESP (depending on
> | what's more important for you, the digital signature or the encryption)
> it's
> | not obvious to me how to do it.
> |
> | --
> | http://www.felipe-alfaro.org/blog/disclaimer/
>



-- 
http://www.felipe-alfaro.org/blog/disclaimer/

Re: AH+ESP and IPv6

[Todd T. Fries]

The other answer is, ESP provides AH, therefore AH is deprecated.

Unless you really really want to play with AH to verify it works and such
(which the below suggests it does not) ...
-- 
Todd Fries .. t...@fries.net

 _
| \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| "..in support of free software solutions."  \  250797 (FWD)
| \
 \\
 
  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
http://todd.fries.net/pgp.txt

Penned by Felipe Alfaro Solana on 20090102 17:38.51, we have:
| On Tue, Dec 30, 2008 at 9:29 PM,  wrote:
| 
| > I'm trying to use both AH and ESP to setup IPsec using Transport mode
| > between two IPv6 OpenBSD 4.4 hosts.
| >
| > So far it worked for AH Transport mode or ESP Transport mode but I don't
| > quite know how to do both AH and ESP. Any ideas?
| >
| > Here's a snippet from /etc/ipsec.conf :
| >
| >  ike esp transport from 2001::10 to 2001::5 psk "secret"
| >
| > The tried the following (and vice versa - ah vice esp).
| >
| >  ike esp transport from 2001::10 to 2001::5 psk "secret"
| >  flow ah from 2001::10 to 2001::5
| >
| > I'm not sure either.
| 
| Since you can apply ESP then AH, or apply AH and then ESP (depending on
| what's more important for you, the digital signature or the encryption) it's
| not obvious to me how to do it.
| 
| -- 
| http://www.felipe-alfaro.org/blog/disclaimer/

Re: Getting the Thinkpad X200 working fully under OpenBSD

[Robert]

Hi,

quick follow up for the archives:


Everything now works with -current.


Thanks all!

- Robert


[1] A catch to get the X intel(4) working for me:
The X200 reports two outputs/monitors that have to be disabled.
(This might mess with the dockingstation, but i don't have one of
those.)

Section "Device"
Identifier  "Card0"
Driver  "intel"
VendorName  "Intel"
BoardName   "GM45 Video"
BusID   "PCI:0:2:0"
Option "monitor-HDMI-1" "HDMI-1"
Option "monitor-HDMI-2" "HDMI-2"
EndSection
Section "Monitor"
Identifier  "HDMI-1"
Option "Ignore" "True"
EndSection
Section "Monitor"
Identifier  "HDMI-2"
Option "Ignore" "True"
EndSection


[2] -current dmesg:
OpenBSD 4.4-current (GENERIC.MP) #0: Fri Jan  2 13:15:16 CET 2009
r...@x200:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2070614016 (1974MB)
avail mem = 1998446592 (1905MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (62 entries)
bios0: vendor LENOVO version "6DET28WW (1.05 )" date 07/30/2008
bios0: LENOVO 74542GU
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP SSDT ECDT APIC MCFG HPET SLIC BOOT ASF! SSDT TCPA SSDT 
SSDT SSDT
acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP0(S4) EXP1(S4) EXP2(S4) 
EXP3(S4) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) EHC0(S3) 
EHC1(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 2394.35 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,CX16,xTPR,NXE,LONG
cpu0: 3MB 64b/line 8-way L2 cache
cpu0: apic clock running at 266MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 2394.00 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,CX16,xTPR,NXE,LONG
cpu1: 3MB 64b/line 8-way L2 cache
ioapic0 at mainbus0 apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (AGP_)
acpiprt2 at acpi0: bus 2 (EXP0)
acpiprt3 at acpi0: bus 3 (EXP1)
acpiprt4 at acpi0: bus -1 (EXP2)
acpiprt5 at acpi0: bus 5 (EXP3)
acpiec0 at acpi0
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpitz0 at acpi0: critical temperature 127 degC
acpitz1 at acpi0: critical temperature 104 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4534" serial   116 type LION oem "SANYO"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock at acpi0 not configured
acpivideo at acpi0 not configured
acpivideo at acpi0 not configured
cpu0: Enhanced SpeedStep 2394 MHz: speeds: 2401, 2400, 1600, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
vga1 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0 at vga1: apic 1 int 16 (irq 11)
drm0 at inteldrm0
"Intel GM45 Video" rev 0x07 at pci0 dev 2 function 1 not configured
"Intel GM45 HECI" rev 0x07 at pci0 dev 3 function 0 not configured
em0 at pci0 dev 25 function 0 "Intel ICH9 IGP M AMT" rev 0x03: apic 1 int 20 
(irq 11), address 00:1f:16:00:12:34
uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x03: apic 1 int 20 (irq 
11)
uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x03: apic 1 int 21 (irq 
11)
uhci2 at pci0 dev 26 function 2 "Intel 82801I USB" rev 0x03: apic 1 int 22 (irq 
11)
ehci0 at pci0 dev 26 function 7 "Intel 82801I USB" rev 0x03: apic 1 int 23 (irq 
11)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x03: apic 1 int 
17 (irq 11)
azalia0: codecs: Conexant CX20561
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801I PCIE" rev 0x03: apic 1 int 20 (irq 
11)
pci1 at ppb0 bus 2
ppb1 at pci0 dev 28 function 1 "Intel 82801I PCIE" rev 0x03: apic 1 int 21 (irq 
11)
pci2 at ppb1 bus 3
iwn0 at pci2 dev 0 function 0 "Intel WiFi Link 5100AGN" rev 0x00: apic 1 int 17 
(irq 11), MIMO 1T2R, MoW, address 00:16:ea:00:12:34
ppb2 at pci0 dev 28 function 3 "Intel 82801I PCIE" rev 0x03: apic 1 int 23 (irq 
11)
pci3 at ppb2 bus 5
uhci3 at pci0 dev 29 function 0 "Intel 82801I USB" rev 0x03: apic 1 int 16 (irq 
11)
uhci4 at pci0 dev 29 function 1 "Intel 82801I USB" rev 0x03: apic 1 int 17 (irq 
11)
uhci5 at pci0 dev 29 function 2 "Intel 82801I USB" rev 0x03: apic 1 int 18 (irq 
11)
e

Saludos - Greetings

[Andres Genovez]

I hope this year, and wish the best luck to OpenBSD.

For all the People who give away his knowledge, without nothing in return.

Keep going.

--
Atentamente

Andris Genovez Tobar / Departamento Tecnico
COMERCIAL SALVADOR PACHECO MORA S.A. / DESDE 1945
SPM TECNOLOGIAS
Cuenca, Luis Cordero 9-70 y Gran Colombia
Av. 27 de Febrero y Jacinto Flores
Telifono. 593-7-2842388 ext 103
Fax. 593-7-2842388 ext 120
Celular 593-97670874
  593-96816996 Alegro
Mail: ageno...@cspmsa.com
Viaje: andresgeno...@gmail.com
www.cspmsa.com
www.crice.org

Re: AH+ESP and IPv6

[Felipe Alfaro Solana]

On Tue, Dec 30, 2008 at 9:29 PM,  wrote:

> I'm trying to use both AH and ESP to setup IPsec using Transport mode
> between two IPv6 OpenBSD 4.4 hosts.
>
> So far it worked for AH Transport mode or ESP Transport mode but I don't
> quite know how to do both AH and ESP. Any ideas?
>
> Here's a snippet from /etc/ipsec.conf :
>
>  ike esp transport from 2001::10 to 2001::5 psk "secret"
>
> The tried the following (and vice versa - ah vice esp).
>
>  ike esp transport from 2001::10 to 2001::5 psk "secret"
>  flow ah from 2001::10 to 2001::5
>
> I'm not sure either.

Since you can apply ESP then AH, or apply AH and then ESP (depending on
what's more important for you, the digital signature or the encryption) it's
not obvious to me how to do it.

-- 
http://www.felipe-alfaro.org/blog/disclaimer/

[PF] IPSEC and PF/RDR rule

[dug]

Hello,

I wish you an happpy new year.

I have some trouble with my new Openbsd router.
I installed  the latest version 4.4. I compile the kernel with the  
RAID FRAME

options.

This router is running services for :
- OSPF
- PF
- CARP
- IPSEC/ISAKMPD/SASYNCD

I have trouble with the IPSEC and PF services (rdr rules particularly).

I have a VPN between two peers : A.B.C.D and E.F.G.H
The peer A.B.C.D is running Openbsd 4.4 and E.F.G.H is running
Feebsd 6.3.
Behind this two peers, I have many networks. So, I use IPENCAP potocol
to connect it.

From the host x.x.x.x behind E.F.G.H, I would like to connect to the  
host

y.y.y.y behind A.B.C.D. This working good.
But when I try to redirect traffic  from x.x.x.x to y.y.y.y toward  
z.z.z.z with a

PF/rdr rule, this don't work.

Following, the pf rule used on the peer A.B.C.D :
rdr  from any to y.y.y.y -> z.z.z.z

I also try this rules :
rdr  enc0 from any to y.y.y.y -> z.z.z.z
rdr  nfe0 from any to y.y.y.y -> z.z.z.z (where is nfe0 is a private  
interface used

to route the traffic).

With the same result .

The traffic is not redirected. I can see on nfe0 the traffic from  
x.x.x.x to y.y.y.y

instead of traffic from x.x.x.x to z.z.z.z.

with the pfctl -s state, I can see state like this :
nfe0 icmp x.x.x.x:31262 -> y.y.y.y:31262   0:0


Before using this configuration on Openbsd 4.4, I used it on Freebsd  
6.3.

Everything is OK.

I'm searching for any documentation on the WEB, without success for the
moment.

Maybe someone can help me here.

Thank you.

Re: ftp from script

[Randal L. Schwartz]

> "Daniel" == Daniel A Ramaley  writes:

Daniel> chdir "/path-to-dir";

You didn't check the success of the chdir.  This will ruin your original
current directory if that fails...

Daniel> unlink <*>;

Oops!

The proper solution is rmtree, a function defined in File::Path:

  use File::Path;
  rmtree('/path-to-dir');

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
 http://www.stonehenge.com/merlyn/>
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.vox.com/ for Smalltalk and Seaside discussion

diff for xenocara' README.macppc

[Nicolas Legrand]

Hey,

the iBookHacks option shouldn't be in the sample xorg.conf since it is
not used anymore :



bye,

-- nicolas

Index: README.macppc
===
RCS file: /cvs/openbsd/xenocara/distrib/notes/README.macppc,v
retrieving revision 1.4
diff -u -r1.4 README.macppc
--- README.macppc   31 Aug 2008 07:33:29 -  1.4
+++ README.macppc   2 Jan 2009 14:37:44 -
@@ -81,8 +81,8 @@
 #  These options are required for use on the Ti PBG4.
 #  Option  "PanelWidth"  "1152"
 #  Option  "PanelHeight" "768"
-#  This option may help if your iBook or Mac mini has screen sync problems
-#  Option  "iBookHacks" "on"
+#  This option enable quirks for specified Mac model, details in Radeon(4)
+#  Option "MacModel" "ibook"
 
 EndSection

use 3 nics as hub / switch

[Marian Hettwer]

Hi All and a happy new year,

got a short question here.
I'm building a home router from a blue box (embedded pc), which has 3 nics
(rl0, 1, 2).
Internet drops in via dhcp client on rl0. Now I got 2 NICs left and I'd
like to use them similar like a hub. Just use a cross over cable and plug
in 2 more devices which can then talk through that router.

My first try was to bridge rl1 and rl2, but then again, I want to use a
dhcp server on both interfaces and it seems like I can't do that, since I
can't give an ip on bridge0 and I wouldn't want to give an IP to rl1 and
rl2.

Any ideas to that setup?
I thought about giving rl1 an IP adress and rl2 one from another network.
Like rl1 with 192.168.1 and rl2 with 192.168.2 and then run dhcpd on rl1
and rl2 serving both subnets.
However, that doesn't look like a good approach to me.

Any other thoughts on that issue?

Ah yes, it's OpenBSD 4.4 release :)

best regards,
Marian

PS.: please CC me, I'm not subscribed to the list.

Re: Strange WLAN issue with ral(4) in hostap mode

[Duncan Patton a Campbell]

On Fri, 2 Jan 2009 05:45:45 +0200
Jussi Peltola  wrote:

> Disable power saving on the clients. 
> 
> 

'zat it?

Dhu

FreeBSD emulation of VMware Tools

[Laurens Vets]

Hi list,

I'm trying to get the FreeBSD version of the VMware Tools installed in 
OpenBSD 4.4 under VMware Server 2.0 following the guide posted at 
http://www.openbsd-wiki.org/index.php?title=HowTo_install_VMWare_tools.


I've had to install the freebsd_lib-4.11p0.tgz package and had to add 
some additional symbolic links to /emul/freebsd/usr/lib.  However, 
vmware-guestd segfaults upon trying to start it:


# ktrace /emul/freebsd/sbin/vmware-guestd --background 
/var/run/vmware-guestd.pid --halt-command "/sbin/shutdown -p -h now"

Segmentation fault (core dumped)
# ktrace -C
# kdump
  6020 ktrace   RET   ktrace 0
  6020 ktrace   CALL  execve(0xcfbdabb3,0xcfbdaa60,0xcfbdaa78)
  6020 ktrace   NAMI  "/emul/freebsd/sbin/vmware-guestd"
  6020 ktrace   NAMI  "/emul/freebsd/usr/lib/libc.so.1"
  6020 ktrace   NAMI  "/emul/freebsd"
  6020 vmware-guestd NAMI  "/emul/freebsd/usr/lib/libc.so.1"
  6020 vmware-guestd EMUL  "freebsd"
  6020 vmware-guestd RET   execve 0
  6020 vmware-guestd PSIG  SIGSEGV SIG_DFL code 1 addr=0x85fa8 trapno=1
  6020 vmware-guestd NAMI  "vmware-guestd.core"
#

I'm not sure how to proceed from here.  Can anyone help me further?

Thanks in advance!